$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa File: b12175cf-2702-3731-83e8-14996dac56a9.roa (raw, json) Hash identifier: ovIerL5EXxcfOc8RD7gFv9Bux0R6WI9m91yX8jsiX8A= Subject key identifier: EF:90:AD:AC:48:39:E3:12:79:04:4A:18:9D:D8:2B:2A:9B:F0:59:F2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B84E78A0C592ED8093558CA40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 8069 IP address blocks: 20.33.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8a:0c:59:2e:d8:09:35:58:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=fe1cfe45-1096-40bc-b7e2-417d2767982c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:46:3d:6d:76:a1:09:1b:89:6f:a0:0a:1a:51: 13:8b:01:be:d6:8b:43:5c:e6:2b:50:9e:1c:0b:12: de:c6:ed:52:0d:46:31:30:d9:0f:0c:3c:e0:2e:fc: 33:de:d6:6f:5d:dc:0b:c6:49:25:03:ba:a5:18:c3: 63:2e:ab:3c:1d:5d:2f:3b:6d:b8:52:34:be:6a:dc: 1a:77:b0:e9:fd:c7:42:14:4b:33:9f:50:80:4e:66: 7a:3e:c1:fb:cb:e0:75:1f:f2:bb:db:d2:94:56:d3: 24:dd:44:70:6c:06:3a:e4:6c:f2:00:0c:44:6f:0e: 94:9e:63:58:16:18:e6:c9:9d:27:b5:98:9d:53:d6: fc:69:46:e0:cf:bf:1f:ce:4b:40:4e:6f:c7:e5:9c: bb:ed:8e:3d:36:de:2a:0a:47:c0:2b:fe:03:e2:ad: 55:63:18:4d:94:5a:84:7b:5f:ce:a9:cc:56:2a:3c: d3:e9:df:64:46:2f:55:12:99:fb:72:27:44:42:4e: 6a:e9:d7:b9:b8:f5:d5:44:2c:5b:78:4c:25:b3:d7: 5b:e0:9a:c6:87:c1:39:ac:8a:0c:dd:70:a9:05:4a: 98:b9:cb:02:11:2c:7d:e9:17:8c:ee:50:c2:ca:77: 0d:5c:8c:de:13:9f:ce:cf:2e:ad:36:c1:b3:3e:b1: db:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:90:AD:AC:48:39:E3:12:79:04:4A:18:9D:D8:2B:2A:9B:F0:59:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:8d:43:c9:94:e6:50:e3:bf:70:7d:ce:a0:2d:aa:c3:df:5d: db:4a:5c:06:03:2c:0a:00:d2:7b:14:9c:f3:a9:37:3d:01:3e: 27:2e:e9:a0:9e:23:97:28:fa:47:72:e1:22:cd:13:f0:90:9e: 43:51:f5:d1:c9:6f:0c:9b:16:20:66:3a:ce:85:66:35:73:d8: 66:9e:90:60:6c:77:c7:bb:62:8e:e9:ec:98:38:18:fd:d5:17: eb:d3:fd:60:9f:97:f5:f5:6d:cd:54:37:64:69:ea:1d:80:64: 19:d9:e8:39:3e:76:a3:da:c7:5e:27:48:85:14:1b:66:11:8f: d5:e8:96:97:0b:99:d1:39:e7:c5:13:98:25:31:6f:ca:14:a8: db:07:b9:f3:c2:9c:ee:08:ea:9f:2a:be:76:10:29:44:e6:ae: 87:c1:0d:ff:41:94:c9:bc:e1:c9:ee:3b:74:60:62:ee:65:14: 97:0b:9a:b4:35:2a:da:64:4f:cb:93:88:41:e9:7f:8e:59:81: 6b:4f:13:73:30:f8:1b:27:0d:c8:e6:50:31:e6:a8:b9:ad:ad: f3:e5:49:7b:83:89:8a:6f:e5:be:9c:9b:7e:55:e1:26:ec:b0: 35:8e:fb:c8:93:71:bd:a3:65:c2:69:49:65:c2:ae:14:cf:23: a7:eb:ce:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54oMWS7YCTVYykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZmUxY2ZlNDUtMTA5Ni00MGJjLWI3ZTItNDE3ZDI3Njc5ODJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEY9bXahCRuJb6AKGlETiwG+1otDXOYrUJ4c CxLexu1SDUYxMNkPDDzgLvwz3tZvXdwLxkklA7qlGMNjLqs8HV0vO224UjS+atwa d7Dp/cdCFEszn1CATmZ6PsH7y+B1H/K729KUVtMk3URwbAY65GzyAAxEbw6UnmNY FhjmyZ0ntZidU9b8aUbgz78fzktATm/H5Zy77Y49Nt4qCkfAK/4D4q1VYxhNlFqE e1/OqcxWKjzT6d9kRi9VEpn7cidEQk5q6de5uPXVRCxbeEwls9db4JrGh8E5rIoM 3XCpBUqYucsCESx96ReM7lDCyncNXIzeE5/Ozy6tNsGzPrHbDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+QraxIOeMSeQRKGJ3YKyqb8FnyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjEyMTc1Y2YtMjcwMi0z NzMxLTgzZTgtMTQ5OTZkYWM1NmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCNQ8mU5lDjv3B9zqAtqsPfXdtKXAYDLAoA0nsUnPOpNz0BPicu6aCe I5co+kdy4SLNE/CQnkNR9dHJbwybFiBmOs6FZjVz2GaekGBsd8e7Yo7p7Jg4GP3V F+vT/WCfl/X1bc1UN2Rp6h2AZBnZ6Dk+dqPax14nSIUUG2YRj9XolpcLmdE558UT mCUxb8oUqNsHufPCnO4I6p8qvnYQKUTmrofBDf9BlMm84cnuO3RgYu5lFJcLmrQ1 KtpkT8uTiEHpf45ZgWtPE3Mw+BsnDcjmUDHmqLmtrfPlSXuDiYpv5b6cm35V4Sbs sDWO+8iTcb2jZcJpSWXCrhTPI6frziQ= -----END CERTIFICATE-----Generated at Mon Oct 20 21:10:19 2025 by rpki-client